build: harden GitHub workflow permissions

[openwrt/staging/stintel.git] / .github / workflows / tools.yml

diff --git a/.github/workflows/tools.yml b/.github/workflows/tools.yml
index 76cbd30db7e75d9ad70d304a2ffedf5f84c35e89..e089e26193d4fe14de9a44ed76b3f8cbb5447c0f 100644 (file)
--- a/.github/workflows/tools.yml
+++ b/.github/workflows/tools.yml
@@ -5,6 +5,9 @@ on:
     paths:
       - 'tools/**'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Build tools on ${{ matrix.os }}